@mmerterden/multi-agent-pipeline 16.18.0 → 16.19.0

package/CHANGELOG.md

@@ -16,6 +16,51 @@ Internal file-layout changes that don't affect the slash-command surface are sti
 
 ## [Unreleased]
 
+## [16.19.0] - 2026-09-02
+
+A review of the three repositories together (pipeline, toolkit MCP, plugin marketplace) with every test suite green found the defects the suites could not see. This release fixes what was found in the pipeline; `@mmerterden/multi-agent-toolkit-mcp` 3.8.0 and the marketplace plugins carry their own halves.
+
+### Added
+
+- **The accessibility scenario audits, it does not only look.** `/multi-agent:test "accessibility"` promised "visual + MCP audit tool" and then inspected screenshots. It now calls `ios_accessibility_audit` / `android_accessibility_audit` on every screen, treats `measurable:false` as not audited rather than clean, and runs `ios_accessibility_audit_deep` when an XCUITest target exists. The full scenario ends with a crash sweep through `ios_list_crashes` / `android_list_crashes`. Nineteen of the toolkit's 87 tools had no pipeline caller; the ones the flows claim now have one.
+- **The UI bug hunter reads before it looks.** `/multi-agent:test` took a full-resolution screenshot after every tap and sent it through the model: 2.9 MB of PNG per step, which is what made the loop feel slow. The flow now reads `ios_get_ui_tree` first (text, ~0.1 s) and picks tap targets from element frames, batches tap / wait / capture / tree sequences into one `agent_run_steps` round trip, writes bulk captures to files and looks only at the screens whose tree changed. Inline screenshots are compact by default in toolkit 3.9.0.
+- **`lint-mcp-refs --strict-tools` probes the sibling checkout.** The tool-existence check only ran when a local path was registered; an `npx` registration meant it was skipped on every machine, including the maintainer's. It now also tries `$MULTI_AGENT_TOOLKIT_REPO` and `~/multi-agent-toolkit-mcp`, so the 73 referenced tools are verified against the live server.
+- **`triage-memory --state` and `diff-explain --task-id` do what their usage said.** Both flags were documented and dead.
+
+### Changed
+
+- **Three reviewers on Claude Code, everywhere it is written down.** 16.12.0 added Opus as the third reviewer and left eight documents saying two: the orchestrator's own description, the standalone `review` command (which dispatched two agents under a "3 in parallel" heading), the triage prompt ("two reviewers returned findings"), the consensus rationale, `modes.md`, the architecture diagram, the README's "two-vendor host" claim and ADR-0001. Every host runs three; the Codex set is now in the standalone command too.
+- **Phase 1 is Sonnet, Phase 2 is Fable, and the template, refs, help and telemetry tags all say so.** Four documents had three answers, and the cost ledger was attributing Phase 1 and 2 spend to opus.
+- **Platform parity has one source order.** The schema and `_dev-context.md` said the check reads `state.siblings[]` "and nothing else"; the contract lists it fourth of four. A model following the schema skipped the step on every standalone review.
+- **`rules/figma-pipeline.md` no longer ships a 31-command catalog of which 30 do not exist.** New installs received the retired list; the current skill surfaces replace it. Its CI claim for `smoke-no-mcp-in-dev-phases` now says where the gate actually runs.
+- **Counts the tree can check.** 55 commands (not 51), 36 Locked decisions (not 35), "80+" toolkit tools where "83" was asserted, and the ecosystem table lists the eight tool categories that sum to 87. `package-lock.json` had stayed at 16.15.0 for three releases.
+- **Phase-doc token budget 57850 -> 58250.** The three-reviewer roster, the worktree convention and the model corrections are real content; the total was sitting 18 tokens under its ceiling.
+- **`install --target=` is refused instead of ignored.** No installer read it; it installed into `$HOME` and said nothing.
+
+### Fixed
+
+- **The secret gate could not block a commit.** `pre-commit-check.sh` exited 1 and printed to stdout; the PreToolUse contract blocks on exit 2. A staged token went through. It also resolved staged paths against the working directory, so from a subdirectory every file was skipped. Exit 2, stderr, repo-root paths.
+- **The attribution guard never saw the pipeline's own commits.** `git -C <worktree> commit` did not match `git\s+commit`. The guard now tokenises git's global options, and force-push is also caught for `+refspec` and `refs/heads/<protected>` forms.
+- **Three smokes were decorative.** `smoke-language-axis`, `smoke-no-token-prompt` and `smoke-worktree-path-convention` did `cd pipeline` and then grepped `pipeline/...`, a path that does not exist, and printed ok. Pointed at the tree they found three real violations, now fixed, and one undocumented convention (worktrees live at `{projectRoot}/.worktrees/{taskId}`, now in Phase 0 Step 6).
+- **Garbage collection could delete a running task's scratch.** The fresh-item guard was `find | head -1 | grep -q` under pipefail; with many fresh files `find` died of SIGPIPE and the guard failed open. `-print -quit` instead, in `gc-tmp`, `gc-worktrees` and `prune-logs`.
+- **`uninstall` with no flags deleted the project's own `AGENTS.md` prose** from the pipeline heading to the next H1, through a fallback written for marker-less host files. Legacy adapter cleanup is opt-in and the fallback applies only to host files.
+- **Every install removed `$HOME/.multi-agent` unconditionally,** a path also used for live per-repo state. Only known legacy entries are removed.
+- **`install --copilot --link` wrote generated files into the source checkout** through the skills symlink. The skills root is a real directory; only authored trees are linked.
+- **Four scripts did nothing from a path with a space.** The main-guard compared `import.meta.url` with an unencoded `file://` string; two of them are dispatch gates. `pathToFileURL` now.
+- **Option parsers that hung or lied.** `fetch-figma-annotations.sh` spun at 100% CPU when an option was the last argument; twenty parsers in `lib/` and `scripts/` now fail with their documented exit code and a message instead of `shift` failing silently.
+- **`vercel-deploy.sh deploy --prod` failed under the only bash macOS ships** (3.2.57: empty array under `set -u`).
+- **`worktree-finalize.sh` reported every worktree but the last as unregistered** (a `while read` loop writing into a closed pipe), salvaged the tracker from a directory nothing writes to, and nested `.pipeline/.pipeline/` on a re-run.
+- **`keychain.py set` put the secret on `security`'s argv,** visible in `ps`, and `credential-store.sh` routed every macOS write through it. Both use `security -i` over stdin; keychain.py's exit codes 2 and 4 are propagated.
+- **`review-watch.sh` marked pull requests reviewed without reviewing them.** It now runs `post-pr-review.sh` for a head with findings and stamps only on success. `post-pr-review.sh`'s Bitbucket verdict PUT checks the status code; a 401 was "approve posted".
+- **`figma-screenshot.sh --discover-sections` answered "this file holds no design" on an expired token** (curl without `--fail`). It exits 2 with the auth message; its temp files have traps and its output dir comes from `mktemp`.
+- **`fetch-crashlytics.sh` and `figma-mcp-refresh.sh` exited with raw child codes** under `set -e`, so a VPN drop was diagnosed as a missing credential. Mapped to the documented 3 and 2.
+- **Sourced from zsh, `credential-store-resolver.sh` printed the store path to stdout** and `figma-token.sh` asked for a single key named `figma figma_pat`.
+- **`validate-analysis-doc.mjs` crashed on a document without front matter,** failed the gate on a check it called a warning, listed the correct Turkish word `Onay` as a typo, and cited "Locked 37" in a list of 36.
+- **`multi-repo-pipeline.sh` committed `git add -A`** while its header said staged changes, and ignored `state.identity`. `plan-todos.sh` returned 0 for an unknown id. `update-issue-progress.sh` failed on macOS `mktemp` on the second call.
+- **Smoke hygiene.** Thirty-six smokes: five asserted against the installed `~/.claude` copy instead of the repo, one passed when `sha256sum` was missing (`"" = ""`), eleven used predictable `/tmp` paths, five wrote probe files into the repo tree, five wrote into the real `$HOME`, four turned errexit on halfway through, four had assertions that could not fail, and the `THY` personal-data pattern matched `thyme` under `grep -i`.
+- **Smaller ones.** `build-skills-index.mjs` recorded `|` and `>-` as descriptions for five skills, so `match-skills` could never score them; `learning-curve` and `aggregate-metrics` computed "cache ratio" with different formulas; `graph-build` omitted Go; `repo-map --include` matched substrings while documented as globs; `eval-mine-corpus` read the corpus from a path the writer never used inside a worktree; `gen-mode-dispatch` defaulted to a mode removed in 16.0.0; `scorecard` claimed no network and ran `npm audit`; `_dev-only-files` misgrouped its regex; `render-cost-summary` selected 0/0 phases; `gc-refs` matched `pr-body-final.md`; `credential-inventory` reported every key missing with rc 0 when no backend existed; `repo-cache` and `issue-fetcher` split scan roots on whitespace; `md2confluence-v3.py` detected every document as Turkish and its residual-character warning could never fire; `github-ssh-setup.sh` wrote `UseKeychain` on Linux; dead functions and stale headers in `cost-lib`, `extract-conventions`, `shadow-git`, `fetch-document`, `benchmark-phase-0`, `sync-parity-check`, `_mcp-register`, `_plugin-skills`, `cost-budget-check`, `triage-memory`, `migrate-prefs`, `eval-golden-tasks`; dangling references to `figma-navigation`, `/multi-agent:fix-bug`, `ask_choice.sh`, `refs/frontend-guide.md` and a `-v610` anchor.
+- **Vendored knowledge skills point at files that exist.** Twenty-six external skills linked 184 files that were never vendored; 58 were fetched from their upstream (Dimillian/Skills, MIT, provenance recorded), the rest de-linked. `help-skills` (Turkish, install-path catalog) is retired; `ios-module-structure` resolves its scripts relative to the skill; `ios-coding-standard` examples use a neutral domain.
+
 ## [16.18.0] - 2026-09-01
 
 ### Changed

package/README.md

@@ -219,7 +219,7 @@ The pipeline runs natively on **Claude Code**, **Copilot CLI** and **Codex CLI**
 
 Filter skills by stack with `--platform=ios\|android\|all`.
 
-**Why Codex gets one skill and not 51.** Codex assembles every discovered skill's name
+**Why Codex gets one skill and not 55.** Codex assembles every discovered skill's name
 and description into a single prompt block and drops entries when it overflows, with no
 error. Measured on 0.145: installing one plugin that declares 142 skills surfaced only
 75 of them and evicted an unrelated user skill. So on Codex the pipeline ships a single
@@ -228,9 +228,9 @@ nothing until read - same commands, same behaviour, a layout the host can actual
 
 Reviewer sets differ because the available models do: Claude Code runs 3 reviewers
 (Fable + Opus + Sonnet), Copilot CLI 3 (Opus + GPT-5.4 + Sonnet), Codex CLI 3 (gpt-5.6 at
-xhigh, gpt-5.4, gpt-5.6 at medium). Codex is single-vendor, so consensus among its three
-is weaker evidence than the same consensus on a two-vendor host, and the triage note
-says so.
+xhigh, gpt-5.4, gpt-5.6 at medium). Claude Code and Codex are single-vendor panels, so
+consensus among their three is weaker evidence than the same consensus on Copilot CLI,
+the one host whose panel spans two vendors, and the triage note says so.
 
 ## Tokens & integrations
 
@@ -257,7 +257,7 @@ Installing the pipeline is not only useful when you run it. Open an ordinary ses
 
 - **Services you already onboarded.** The token `setup` mapped is readable now - resolve the logical name through `credential-store.sh` and fetch the issue, the page, the log. **Reads are ordinary work; writes are not.** Posting a Jira comment, editing an issue or opening a PR goes through the pipeline commands, because the rules that make those safe (never auto-close, `Ref:` not `Closes:`, humanizer on outward prose) live there.
 - **The stack skills `/multi-agent:stack` enabled for the repo.** Each toolkit's own `index` skill routes; the pipeline keeps no copy of that table.
-- **The `multi-agent-toolkit` MCP.** 83 tools for a running app - screen state, crash logs, design comparison, store pre-submission.
+- **The `multi-agent-toolkit` MCP.** 80+ tools for a running app - screen state, crash logs, design comparison, store pre-submission.
 
 Uninstall preserves this layer: the tokens, the reader that opens them, the mapping that names them, and the MCP registration. Removing the pipeline should not cost you the credentials you onboarded through it.
 

package/README.tr.md

@@ -219,7 +219,7 @@ Pipeline **Claude Code**, **Copilot CLI** ve **Codex CLI** üzerinde native çal
 
 Skill'leri stack'e göre filtrele: `--platform=ios\|android\|all`.
 
-**Codex neden 51 değil de tek bir skill alıyor.** Codex, keşfettiği her skill'in adını
+**Codex neden 55 değil de tek bir skill alıyor.** Codex, keşfettiği her skill'in adını
 ve açıklamasını tek bir prompt bloğuna toplar ve blok taştığında girdileri hatasızca
 düşürür. 0.145 üzerinde ölçüldü: 142 skill deklare eden bir plugin kurulduğunda sadece
 75'i yüzeye çıktı ve alakasız bir kullanıcı skill'i tahliye edildi. Bu yüzden Codex'te
@@ -258,7 +258,7 @@ Pipeline'ı kurmak yalnız onu çalıştırdığında işe yaramıyor. Sıradan
 
 - **Zaten onboard ettiğin servisler.** `setup`'ın eşlediği token okunabilir durumda - mantıksal adı `credential-store.sh` ile çöz, issue'yu, sayfayı, logu getir. **Okuma sıradan iş, yazma değil.** Jira yorumu, issue düzenleme ve PR açma pipeline komutlarından geçer, çünkü onları güvenli kılan kurallar (issue asla otomatik kapanmaz, `Closes:` değil `Ref:`, dışa dönük metinde humanizer) orada yaşıyor.
 - **`/multi-agent:stack`'in bu repo için açtığı stack skilleri.** Yönlendirmeyi her toolkit'in kendi `index` skill'i yapar; pipeline o tablonun kopyasını tutmaz.
-- **`multi-agent-toolkit` MCP.** Çalışan uygulama için 83 araç - ekran durumu, crash logu, tasarım karşılaştırma, store ön-kontrolü.
+- **`multi-agent-toolkit` MCP.** Çalışan uygulama için 80+ araç - ekran durumu, crash logu, tasarım karşılaştırma, store ön-kontrolü.
 
 Uninstall bu katmanı korur: token'lar, onları açan okuyucu, adlarını tutan eşleme ve MCP kaydı. Pipeline'ı kaldırmak, onun üzerinden onboard ettiğin credential'ları kaybetmek anlamına gelmemeli.
 

package/docs/FIGMA_PIPELINE.md

@@ -71,7 +71,7 @@ Minimum viable config:
 
 Android projects swap the `build` section to `{ "gradleModule": ":components:button", "variant": "debug" }` and set `project.platform` to `"android"`.
 
-**Optional `ui` block - UI interaction systems.** Consumed by the `figma-navigation` / `figma-overlays` / `figma-bottom-sheets` skills and Phase 4 review. Omit it (or set `mode: "native"`) and the pipeline generates stock SwiftUI (`NavigationStack`, `.alert`/`.sheet(item:)`, `.sheet`+`presentationDetents`). Set `mode: "custom"` to route to a project-supplied system by type name:
+**Optional `ui` block - UI interaction systems.** Consumed by the enabled stack plugin's `navigation` / `overlays` / `bottom-sheets` skills (`ai-ios-toolkit:*` / `ai-android-toolkit:*`) and Phase 4 review. Omit it (or set `mode: "native"`) and the pipeline generates stock SwiftUI (`NavigationStack`, `.alert`/`.sheet(item:)`, `.sheet`+`presentationDetents`). Set `mode: "custom"` to route to a project-supplied system by type name:
 
 ```json
 "ui": {

package/docs/adr/0001-three-model-triage.md

@@ -69,8 +69,10 @@ Negative / costs:
 - Cross-provider (GPT) dependency on Copilot CLI - if the provider is down,
   the pipeline continues with 2 reviewers (Opus + Sonnet) and a warning.
 - Cross-CLI asymmetry: Copilot CLI catches a slice of failures (edge cases
-  via GPT diversity) that Claude Code's 2-model set misses. Accepted as a
-  tradeoff against platform reachability.
+  via GPT diversity) that Claude Code's 2-model set missed. Accepted then as a
+  tradeoff against platform reachability; v16.12.0 closed the count gap (three
+  reviewers on every host, see the note at the top), while the vendor gap
+  remains: Claude Code's Fable + Opus + Sonnet panel is single-vendor.
 
 ## Alternatives Considered
 

package/docs/architecture.md

@@ -9,7 +9,7 @@ graph TD
     P1["Phase 1: Analysis<br/>Codebase scan (parallel Explore agents)"]
     P2["Phase 2: Planning<br/>Task breakdown, architecture review"]
     P3["Phase 3: Dev<br/>TDD: RED → GREEN → REFACTOR"]
-    P4["Phase 4: Review<br/>Parallel + Fable triage<br/>(Claude: 2-model · Copilot: 3-model)"]
+    P4["Phase 4: Review<br/>Parallel + Fable triage<br/>(3 reviewers per host: Claude Code Fable + Opus + Sonnet · Copilot GPT-5.4 + Opus + Sonnet)"]
     P5["Phase 5: Test<br/>Optional manual testing"]
     P6["Phase 6: Commit<br/>Git commit, PR creation"]
     P7["Phase 7: Report<br/>Jira · Wiki+Figma · Confluence · Log · Knowledge"]
@@ -169,7 +169,7 @@ revisions of this diagram - Codex CLI and the two independently-shipped repos
 ```mermaid
 graph TD
     CC["Claude Code<br/>(source of truth)"]
-    COP["Copilot CLI<br/>(instructions + 51 skills)"]
+    COP["Copilot CLI<br/>(instructions + 55 skills)"]
     COD["Codex CLI<br/>(1 router skill + 55 refs)"]
     REPO["Pipeline Repo<br/>(npm package)"]
     WEB["Website"]

package/docs/ecosystem.md

@@ -106,14 +106,14 @@ hand-authored *inside* `multi-agent-plugins` and are never touched by sync.
 
 ```mermaid
 graph TD
-    EXT["pipeline/skills/shared/external/<br/>154 skills - single authoring source<br/>(the pipeline's own phases read these too)"]
+    EXT["pipeline/skills/shared/external/<br/>153 skills - single authoring source<br/>(the pipeline's own phases read these too)"]
 
-    EXT -->|"cross-stack skills"| COMMONP["ai-common-toolkit<br/>11 skills · v0.2.7"]
-    EXT -->|"outside facts for analysis"| ANAP["ai-analyst-toolkit<br/>5 skills · v0.1.1"]
-    EXT -->|"Apple/Xcode-only"| IOSP["ai-ios-toolkit<br/>148 skills · v0.10.0"]
-    EXT -->|"Android/Kotlin-only"| ANDP["ai-android-toolkit<br/>30 skills · v0.1.4"]
-    EXT -->|"backend-only"| BEP["ai-backend-toolkit<br/>33 skills · v0.1.5"]
-    EXT -->|"web/frontend-only"| FEP["ai-frontend-toolkit<br/>25 skills · v0.1.4"]
+    EXT -->|"cross-stack skills"| COMMONP["ai-common-toolkit<br/>11 skills · v0.2.10"]
+    EXT -->|"outside facts for analysis"| ANAP["ai-analyst-toolkit<br/>5 skills · v0.1.3"]
+    EXT -->|"Apple/Xcode-only"| IOSP["ai-ios-toolkit<br/>133 skills · v0.12.1"]
+    EXT -->|"Android/Kotlin-only"| ANDP["ai-android-toolkit<br/>30 skills · v0.1.5"]
+    EXT -->|"backend-only"| BEP["ai-backend-toolkit<br/>33 skills · v0.1.7"]
+    EXT -->|"web/frontend-only"| FEP["ai-frontend-toolkit<br/>25 skills · v0.1.5"]
 
     COMMONP --> BUMP{"skill set<br/>changed?"}
     ANAP --> BUMP
@@ -206,16 +206,18 @@ e.g. `apple-archive-compliance` requires `ios_app_store_audit` from
 that drops or renames a tool a pipeline skill depends on is a **major** bump, by
 that step's own contract).
 
-### multi-agent-toolkit-mcp's 83 tools, by category
+### multi-agent-toolkit-mcp's tools, by category (87 at the toolkit README's last count; the pipeline says "80+" elsewhere so the number does not go stale with every toolkit release)
 
 | Category | Tools | Primary pipeline consumers |
 |---|---|---|
-| Device Control | 58 | `/multi-agent:test`, `test-dark-mode`, `test-accessibility`, `test-dynamic-type`, `test-screenshots`, `manual-test`, `design-check` |
-| Accessibility Audit | 2 | `test-accessibility` |
+| Device Control | 59 | `/multi-agent:test`, `test-dark-mode`, `test-accessibility`, `test-dynamic-type`, `test-screenshots`, `manual-test`, `design-check` |
+| Memory | 2 (`ios_leaks`, `android_meminfo`) | none yet; available outside the pipeline |
+| Crash Diagnostics | 2 (`ios_list_crashes`, `android_list_crashes`) | `/multi-agent:test` full scenario (end-of-run crash sweep), outside-the-pipeline sessions |
+| Accessibility Audit | 3 (`ios_accessibility_audit`, `android_accessibility_audit`, `ios_accessibility_audit_deep`) | `/multi-agent:test` accessibility scenario, `test-accessibility` |
 | Store Compliance | 5 | `store-ready`, `testflight-validation`, `apple-archive-compliance` skill, Phase 4 Security Auditor |
 | Web Automation | 8 | frontend-stack UI testing (via `test`) |
 | Design Audit | 6 | `design-check` (mock-mode vs Figma conformance) |
-| Autonomous Agent DSL | 1 | any skill that needs a scripted multi-step device flow in one round trip |
+| Autonomous Agent DSL | 2 (`agent_run_steps`, `agent_query_output`) | any skill that needs a scripted multi-step device flow in one round trip |
 
 ---
 

package/docs/features.md

@@ -36,7 +36,7 @@ The install is not only useful while `/multi-agent` is running. `rules/outside-t
 
 - **Onboarded service credentials.** Resolve the logical name through `credential-store.sh` and read the issue, page or log. Writes route through the pipeline commands, which carry the rules that make them safe - issues are never auto-closed, PR bodies use `Ref:`, outward prose goes through the humanizer.
 - **The stack skills enabled for this repo.** Each toolkit's own `index` skill routes. The pipeline reads the effective `enabledPlugins` rather than keeping a stack table, so a seventh toolkit needs no code change.
-- **The `multi-agent-toolkit` MCP.** 83 tools for a running app.
+- **The `multi-agent-toolkit` MCP.** 80+ tools for a running app.
 
 Uninstall preserves the whole layer - tokens, the reader that opens them, the mapping that names them, the MCP registration. It is 1.5 kB of always-loaded text; the detail lives in a ref that loads on demand, and a gate keeps both under a ceiling because every byte there is paid by every session.
 
@@ -55,7 +55,7 @@ Measured on a 4,300-file Swift app against a grep-and-read baseline at the same
 | iOS/Swift      | `.xcodeproj`, `Package.swift`                | `refs/swiftui-guide.md`  |
 | Android/Kotlin | `build.gradle[.kts]`                         | `refs/android-guide.md`  |
 | Backend        | `requirements.txt`, `package.json`, `go.mod` | `refs/backend-guide.md`  |
-| Frontend       | `package.json` + framework detection         | `refs/frontend-guide.md` |
+| Frontend       | `package.json` + framework detection         | `refs/web-guide.md`      |
 | Docker         | `Dockerfile`, `docker-compose.yml`           | `refs/backend-guide.md`  |
 
 Build commands, test runners, lint tools, and review focus areas all adapt to the detected stack.

package/index.js

@@ -73,7 +73,7 @@ if (command === "--version" || command === "-v" || command === "version") {
 
   Options:
     --no-color           Disable colored output
-    --target=<path>      Target dir override (install and legacy-adapter cleanup on uninstall; defaults to cwd)
+    --target=<path>      Uninstall only: project dir for the legacy adapter cleanup (--cursor / --copilot-chat / --antigravity; defaults to cwd). Install always targets $HOME.
     --platform=ios|android|all   Filter external skills by platform (default: all)
 
   After installation:

package/install/_common.mjs

@@ -278,11 +278,29 @@ const ABANDONED_TREES = Object.freeze([
   {
     dir: ".multi-agent",
     root: "home",
+    // `.multi-agent/` is also the live per-repo path memory-save.sh and the
+    // offload-ref writer use (memory/, refs/, .gitignore). If $HOME is itself a
+    // repo, or anything else put an unknown entry there, the tree is not ours.
+    knownEntries: ["scripts", "lib", "schemas", ".DS_Store"],
     reason:
       "shared runtime for the Cursor / Antigravity / Copilot Chat adapters, all deleted in v10.7.0",
   },
 ]);
 
+/**
+ * @param {string} target
+ * @param {ReadonlyArray<string>|undefined} knownEntries
+ * @returns {boolean} true when every top-level entry is one the abandoned tree is known to contain
+ */
+function isKnownLegacyTree(target, knownEntries) {
+  if (!knownEntries) return true;
+  try {
+    return readdirSync(target).every((name) => knownEntries.includes(name));
+  } catch {
+    return false;
+  }
+}
+
 /**
  * Registry of command renames. Command names are an interface: users type
  * them, docs and saved routines reference them, and Copilot installs derive
@@ -311,10 +329,16 @@ export const COMMAND_RENAMES = Object.freeze({
  */
 export function pruneAbandonedTrees(claudeDir, home = dirname(claudeDir)) {
   let removed = 0;
-  for (const { dir, root, reason } of ABANDONED_TREES) {
+  for (const { dir, root, reason, knownEntries } of ABANDONED_TREES) {
     const base = root === "home" ? home : claudeDir;
     const target = join(base, dir);
     if (!existsSync(target)) continue;
+    if (!isKnownLegacyTree(target, knownEntries)) {
+      console.log(
+        `    kept ${target}: holds entries no abandoned install wrote, so it is not ours to remove`,
+      );
+      continue;
+    }
     if (dryRun) {
       console.log(`    [dry-run] would remove abandoned tree ${target} (${reason})`);
       removed++;

package/install/_dev-only-files.mjs

@@ -44,9 +44,9 @@ export const CONSUMER_SMOKES = Object.freeze([
  * notices - the safe direction for reason 2 above.
  */
 export const MAINTAINER_SMOKES = new RegExp(
-  `^smoke-(?!${CONSUMER_SMOKES.map((n) => n.replace(/^smoke-/, "").replace(/\./g, "\\.")).join(
+  `^smoke-(?!(?:${CONSUMER_SMOKES.map((n) => n.replace(/^smoke-/, "").replace(/\./g, "\\.")).join(
     "|",
-  )}$)`,
+  )})$)`,
 );
 
 /**

package/install/_mcp-register.mjs

@@ -154,9 +154,10 @@ function saysAlreadyExists(text) {
  * "skipped MCP registration (Command failed)" would send the user to fix something that
  * is already correct, and that is exactly what the first version of this did.
  *
- * The existing entry is left alone rather than removed and re-added: a user may have
- * added env vars or switched the command to a local checkout, and an installer has no
- * business discarding that.
+ * An existing entry under the same name is removed and re-added so its spec follows
+ * the installed version (the entry is installer-owned; the reason is at the remove
+ * below). A user who points the toolkit at a local checkout registers it under a
+ * different name or re-applies the change after an update.
  *
  * Never fatal: a missing CLI or a failed write must not fail the install, because the
  * rest of the tree is still correct and useful. It prints the manual command instead.

package/install/_plugin-skills.mjs

@@ -30,7 +30,7 @@ import { join } from "path";
 /** Uninstall reads this to know exactly which delivered skill dirs are ours to remove. */
 export const PLUGIN_SKILLS_MANIFEST = ".plugin-skills-manifest.json";
 
-import { copyDir, countFiles, ensureDir, ensureRealDir, isDryRun, wipeDir } from "./_common.mjs";
+import { copyDir, countFiles, ensureDir, isDryRun, wipeDir } from "./_common.mjs";
 
 /** Subtrees a plugin authors itself. `knowledge/` is generated, so it is excluded. */
 const AUTHORED_GROUPS = Object.freeze(["index", "reference", "workflow", "tools"]);
@@ -341,5 +341,3 @@ export function pipelineOwnedSkillNames(pipelineSrc) {
   }
   return owned;
 }
-
-export { ensureRealDir };

package/install/copilot.mjs

@@ -22,6 +22,7 @@ import {
   isDryRun,
   pruneOrphanSkillFiles,
   removePipelineAgentFiles,
+  symlinkDir,
   wipeDir,
   writeFile,
 } from "./_common.mjs";
@@ -303,9 +304,12 @@ function installSkills(opts) {
   const { home, pipelineSrc, dest, indexOnly, useSymlinks, platformFlag } = opts;
   console.log("  [Copilot CLI] Installing skills...");
 
-  // Same symlink guard as the other owned trees: never prune or copy through
-  // a --link-era symlink into the repo checkout.
-  if (!useSymlinks) ensureRealDir(dest);
+  // The skills root is always a real directory, in --link mode too: the manifest,
+  // index and README written below are generated files, and an older --link
+  // install pointed the whole root at pipeline/skills/shared/core, so every one
+  // of those writes (and the external / plugin symlinks) landed in the checkout.
+  // Link mode now links each authored skill dir individually instead.
+  ensureRealDir(dest);
 
   if (indexOnly) {
     try {
@@ -334,7 +338,7 @@ function installSkills(opts) {
     let pruned = 0;
     for (const entry of readdirSync(dest, { withFileTypes: true })) {
       if (
-        entry.isDirectory() &&
+        (entry.isDirectory() || entry.isSymbolicLink()) &&
         entry.name.startsWith("multi-agent") &&
         !sourceNames.has(entry.name)
       ) {
@@ -358,10 +362,15 @@ function installSkills(opts) {
 
   if (existsSync(sharedCoreSrc)) {
     if (useSymlinks) {
-      // --link (dev) mode points at the repo, so there is nothing to rewrite -
-      // and rewriting would mean editing the checkout.
-      copyDir(sharedCoreSrc, dest, { useSymlinks });
-      copilotSkillCount += countFiles(sharedCoreSrc);
+      // --link (dev) mode points each skill dir at the repo, so there is nothing
+      // to rewrite - and rewriting would mean editing the checkout.
+      ensureDir(dest);
+      for (const e of readdirSync(sharedCoreSrc, { withFileTypes: true })) {
+        if (!e.isDirectory()) continue;
+        wipeDir(join(dest, e.name));
+        symlinkDir(join(sharedCoreSrc, e.name), join(dest, e.name));
+        copilotSkillCount += countFiles(join(sharedCoreSrc, e.name));
+      }
     } else {
       // Wipe each pipeline-owned skill dir before refilling it. Copying only ADDS,
       // so a subtree from an older layout survives inside a directory the installer
@@ -399,7 +408,7 @@ function installSkills(opts) {
     for (const name of keep) {
       const src = join(sharedExternalSrc, name);
       const dst = join(dest, name);
-      if (!useSymlinks) wipeDir(dst);
+      wipeDir(dst);
       copyDir(src, dst, { useSymlinks });
       copilotSkillCount += countFiles(src);
     }

package/install/index.mjs

@@ -54,7 +54,7 @@ export async function runInstall(argv) {
     "--dry-run",
     "--prune-external",
   ];
-  const KNOWN_PREFIXES = ["--target=", "--platform="];
+  const KNOWN_PREFIXES = ["--platform="];
   const unknown = flags.filter(
     (f) =>
       f.startsWith("--") &&
@@ -63,9 +63,7 @@ export async function runInstall(argv) {
   );
   if (unknown.length > 0) {
     console.error(`Error: unknown flag(s): ${unknown.join(", ")}`);
-    console.error(
-      `Supported: ${[...KNOWN_FLAGS, "--target=<path>", "--platform=<ios|android|all>"].join(" ")}`,
-    );
+    console.error(`Supported: ${[...KNOWN_FLAGS, "--platform=<ios|android|all>"].join(" ")}`);
     process.exit(1);
   }
 

package/install/templates/copilot-instructions.md

@@ -12,13 +12,13 @@
 1. **Analysis** - Stack detection, codebase exploration
 2. **Planning** - Task decomposition, architecture review, user approval
 3. **Dev** - TDD cycle: test -> code -> build
-4. **Review** - Deterministic gates + CLI-aware parallel review + Opus triage.
-   Copilot CLI dispatches **3 reviewers in parallel**: GPT-5.4 (edge cases +
-   cross-provider diversity) + Opus (security + architecture) + Sonnet (quality +
-   correctness). Findings flow into an Opus triage pass that filters false-positives
-   and out-of-scope items before looping back to Phase 3. Claude Code drops GPT-5.4
-   (not natively reachable there) and runs a 2-model set - this is the only
-   intentional cross-CLI asymmetry for Phase 4.
+4. **Review** - Deterministic gates + CLI-aware parallel review + triage.
+   Every host dispatches **3 reviewers in parallel**. Copilot CLI: GPT-5.4 (edge
+   cases + cross-provider diversity) + Opus (security + architecture) + Sonnet
+   (quality + correctness), followed by an Opus triage pass. Claude Code: Fable +
+   Opus + Sonnet, followed by a Fable triage pass (GPT-5.4 is not natively
+   reachable there - the only intentional cross-CLI asymmetry for Phase 4). Triage
+   filters false-positives and out-of-scope items before looping back to Phase 3.
 5. **Test** - Optional manual testing + on-demand device audits
 6. **Commit** - Secret scan · commit · push · PR creation
 7. **Report** - Jira comment · Wiki + Figma screenshots · Confluence · log · knowledge + memory

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mmerterden/multi-agent-pipeline",
-  "version": "16.18.0",
+  "version": "16.19.0",
   "description": "8-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase cost ledger, persistent learnings memory, wiki generation, commit automation. Token-preserving uninstall.",
   "type": "module",
   "main": "index.js",

package/pipeline/claude-md-template.md

@@ -13,8 +13,8 @@
 
 ### Pipeline Phases
 
-1. Analysis (Opus) -> scope, impact analysis
-2. Planning (Opus) -> spec, task breakdown
+1. Analysis (Sonnet, `explorer` persona) -> scope, impact analysis
+2. Planning (Fable; Opus when the fallback ladder engages) -> spec, task breakdown
 3. Development (Sonnet) -> TDD, code, build
 4. Review -> deterministic gates + parallel review + Fable triage
    - Claude Code: Fable + Opus + Sonnet (3 paralel)

package/pipeline/commands/multi-agent/SKILL.md

@@ -1,5 +1,5 @@
 ---
-description: "Task orchestrator  -  full pipeline via Jira ID + branch or GitHub Issue URL: analysis, plan, TDD development, parallel review + Fable triage (CLI-aware: 2-model on Claude Code, 3-model on Copilot CLI), commit, log. Use when given a Jira ID, a GitHub issue or a free-text task and the whole pipeline should run."
+description: "Task orchestrator  -  full pipeline via Jira ID + branch or GitHub Issue URL: analysis, plan, TDD development, parallel review + Fable triage (3 reviewers per host: Fable + Opus + Sonnet on Claude Code, GPT-5.4 + Opus + Sonnet on Copilot CLI), commit, log. Use when given a Jira ID, a GitHub issue or a free-text task and the whole pipeline should run."
 description-tr: "Görev orkestratörü - Jira ID + branch veya GitHub Issue URL ile tam pipeline: analiz, plan, TDD geliştirme, paralel review + Fable triyajı (CLI'ya göre: Claude Code'da 3, Copilot CLI'da 3 model), commit, log"
 allowed-tools: Agent, Bash, Read, Write, Edit, Glob, Grep, TaskCreate, TaskUpdate, TaskList, TaskGet, AskUserQuestion, WebFetch, WebSearch, NotebookEdit, Skill
 ---
@@ -48,7 +48,7 @@ Classification schema lives in `$HOME/.claude/multi-agent-refs/_input-parser.md`
 | 7 | `issue` | full picker | account → repo (multi) → issue → maturity → dev-context |
 | 8 | Free-text | `freetext` | account → repo (single) → dev-context (maturity skip) |
 
-**Rule**: Whatever the type, **account is always asked** (autopilot picks a default). After issue fetch, **maturity check is mandatory**  -  blockers halt the pipeline. Picker `label` + `header` render in English (`promptLanguage` is locked to `en`); the `question` and each option's `description` render in `outputLanguage`, per the canonical matrix in `multi-agent-refs/rules.md`.
+**Rule**: Whatever the type, **account is always asked** (autopilot picks a default). After issue fetch, **maturity check is mandatory**  -  blockers halt the pipeline. Picker `header` renders in English (the 12-char chip); the `question`, each option's `label` and each option's `description` render in `outputLanguage`, per the canonical matrix in `multi-agent-refs/rules.md`.
 
 Lib scripts (`~/.claude/lib/`):
 - `account-resolver.sh`  -  keychain account inventory
@@ -102,8 +102,8 @@ Lib scripts (`~/.claude/lib/`):
 This command uses lazy loading for token efficiency. Read the relevant sub-file based on the routed action:
 
 **File layout:**
-- `commands/multi-agent/*.md` → **invocable actions** (each gets its own `/multi-agent:<name>` slash command)
-- `$HOME/.claude/multi-agent-refs/**` → **internal references**, read by the main command, never invoked directly (surface as `/multi-agent:refs:...` in autocomplete  -  the prefix signals "not an action")
+- `commands/multi-agent/{cmd}/SKILL.md` → **invocable actions** (each gets its own `/multi-agent:<name>` slash command)
+- `$HOME/.claude/multi-agent-refs/**` → **internal references**, read by the main command, never invoked directly. They live outside `commands/` precisely so they never appear in slash-command autocomplete.
 
 | Route | File to Read |
 |-------|-------------|
@@ -262,7 +262,7 @@ When called with `review`:
 1. Detect current branch and project from cwd (or ask)
 2. Get diff: `git diff HEAD` (unstaged + staged)
 3. If no diff, get diff against base branch: `git diff origin/{baseBranch}...HEAD`
-4. Launch Phase 4 review (parallel + Fable triage  -  2-model on Claude Code, 3-model on Copilot CLI) on the diff
+4. Launch Phase 4 review (parallel + Fable triage  -  3 reviewers on every host: Fable + Opus + Sonnet on Claude Code, GPT-5.4 + Opus + Sonnet on Copilot CLI) on the diff
 5. No worktree, no state file  -  lightweight one-shot review
 6. Print findings to terminal
 

package/pipeline/commands/multi-agent/complaint-analysis/SKILL.md

@@ -127,7 +127,7 @@ Set `phase: "drafting"`.
 ### Phase 4 - Draft, humanize, buffer
 
 1. Render the report per `$HOME/.claude/multi-agent-refs/complaint-analysis-template.md` (8 fixed sections; single-language body in `outputLanguage`; verdict tokens English per Locked 9) to `/tmp/complaint-analysis-<run-slug>-<UTC-iso8601>/report.md`. Store `outputs.draftDir`.
-2. **Humanizer pass (MANDATORY: actually invoke the `ai-common-toolkit:humanizer` skill; the punctuation grep alone does NOT satisfy this)** with `language: <tr|en>`, `tone: technical-explanatory`, `stripFancyPunctuation: true`. Diacritics preserved (Locked 8).
+2. **Humanizer pass (required: actually invoke the `ai-common-toolkit:humanizer` skill; the punctuation grep alone does NOT satisfy this)** with `language: <tr|en>`, `tone: technical-explanatory`, `stripFancyPunctuation: true`. Diacritics preserved (Locked 8).
 3. Punctuation gate: `node $HOME/.claude/scripts/validate-complaint-doc.mjs <draft>` reports no banned-punctuation error. It checks the policy in Node, so the same result holds on macOS, Linux and Windows; `grep -P` is absent from BSD grep and would never run there.
 4. Show the draft path + size to the user. Set `phase: "awaiting_output_decision"`.
 

package/pipeline/commands/multi-agent/design-check/SKILL.md

@@ -133,7 +133,7 @@ for l in sys.stdin:
    Print the resolved set grouped by screen **with its relaunch cost**: `<n> targets · <relaunchCount> relaunches`. Read the cost from `plan`, not from the target count - one relaunch serves every in-app target on that screen, so a 50-target module is typically a dozen relaunches, not fifty. **Whole-module is the intended default**; only ask for confirmation when `relaunchCount` exceeds `config coverage.confirmAbove` (default 25), and phrase it as a cost estimate, not as an invitation to shrink the audit. Never propose a smaller scope as the easy path - a scoped run is for resuming or for a focused re-check, not for avoiding work.
 7. **`--resume`** - read the most recent `~/DesignChecks/{repo}__{module}/*/run-state.json`; the scope becomes that run's targets minus its `covered` and minus its `skipped` entries. Skips carry a reason and are honoured, so a resume covers the genuinely unaudited remainder. No previous run → tell the user and fall back to whole-module scope after confirmation.
 8. **Report dir** - create `~/DesignChecks/{repo}__{module}/{UTC-timestamp}/` (and `assets/` inside it) now, and persist it as `state.designCheck.reportDir`. Phase 3 writes captures, comparison images, and `run-state.json` into it, so it must exist before driving starts - not at export time. This is report output, not a worktree; $HOME is intended here.
-9. **Worktree** - build the Debug app in an isolated worktree so the user's tree is untouched. Follow `phase-0-init.md` Step 8 convention exactly: `{projectRoot}/{worktreeBasePath}/{taskId}` (default `.worktrees/DC-<shortId>`), **never under $HOME** (`feedback_worktree_path_convention`). Stale-lock heal (`git worktree prune`) + residue guard (`.worktrees/` in `.git/info/exclude`) first. Local mode is not offered - the audit always uses a worktree checkout of the current branch's HEAD (no fetch/push).
+9. **Worktree** - build the Debug app in an isolated worktree so the user's tree is untouched. Follow the `phase-0-init.md` Step 6 worktree location convention exactly: `{projectRoot}/.worktrees/{taskId}` with `taskId` = `DC-<shortId>`, **never under $HOME** (the `.worktrees` segment is fixed, not a preference). Stale-lock heal (`git worktree prune`) + residue guard (`.worktrees/` in `.git/info/exclude`) first. Local mode is not offered - the audit always uses a worktree checkout of the current branch's HEAD (no fetch/push).
 
 Persist `agent-state.json` with `taskId`, `mode: "design-check"`, `platform`, `projectRoot`, `worktreePath`, `module`, `designCheck`.
 

package/pipeline/commands/multi-agent/help/SKILL.md

@@ -53,7 +53,7 @@ How It Works (Phase 0  -  Interactive Flow):
 Pipeline (after Phase 0)  -  shown as visual cards in terminal:
 
   Phase 0:   Init       -> The 8 steps above
-  Phase 1:   Analysis   -> Stack detection + codebase scan (Fable)
+  Phase 1:   Analysis   -> Stack detection + codebase scan (Sonnet)
   Phase 2:   Planning   -> Task breakdown + architecture review + Plan Approval Gate
                           (clarification max 2 rounds + approval loop  -  Full + interactive
                            only; a Short run has no plan, autopilot may not ask)
@@ -331,7 +331,7 @@ Nasıl Çalışır (Phase 0  -  İnteraktif Akış):
 Pipeline (Phase 0'dan sonra)  -  terminalde görsel kart olarak görünür:
 
   Phase 0:   Init       -> Yukarıdaki 8 adım
-  Phase 1:   Analysis   -> Stack tespiti + codebase taraması (Fable)
+  Phase 1:   Analysis   -> Stack tespiti + codebase taraması (Sonnet)
   Phase 2:   Planning   -> Task kırılımı + mimari inceleme + Plan Onay Kapısı
                           (clarification max 2 tur + onay döngüsü  -  sadece Tam +
                            etkileşimli; Kısa'da plan yok, autopilot soru soramaz)

package/pipeline/commands/multi-agent/local-autopilot/SKILL.md

@@ -67,7 +67,7 @@ Depth is a separate axis, asked at Phase 0 Step 7.5 rather than encoded in the c
 
 ## Delegation
 
-Orchestrator routing: the routing table in `$HOME/.claude/commands/multi-agent/SKILL.md` resolves `local-autopilot` as the union of the `dev-local` + `autopilot` mode mixins. Contract details: `$HOME/.claude/multi-agent-refs/phases/phase-0-init.md` Step 8 (local branch) + `$HOME/.claude/multi-agent-refs/phases/phase-2-planning.md` Step 5 (autopilot gate skip + safety classifier).
+Orchestrator routing: the routing table in `$HOME/.claude/commands/multi-agent/SKILL.md` resolves `local-autopilot` as the union of the `dev-local` + `autopilot` mode mixins. Contract details: `$HOME/.claude/multi-agent-refs/phases/phase-0-init.md` Step 6 (local branch) + `$HOME/.claude/multi-agent-refs/phases/phase-2-planning.md` Step 5 (autopilot gate skip + safety classifier).
 ## Required: outward-facing payload contracts
 
 Before writing anything outward-facing  -  PR body, Jira comment, Confluence page, closing report  -  load `$HOME/.claude/multi-agent-refs/payload-contracts.md`. It names the canonical section set for each payload, the markup dialect per surface (PR body is Markdown, Jira is wiki markup  -  mixing them is a defect), and the token/duration numbers the closing report must carry. Improvising a payload shape from memory is the most common failure of the short modes.